diff options
Diffstat (limited to 'jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/cors/CorsLogic.java')
| -rw-r--r-- | jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/cors/CorsLogic.java | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/cors/CorsLogic.java b/jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/cors/CorsLogic.java index 185984deeec..3d8a661d5d1 100644 --- a/jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/cors/CorsLogic.java +++ b/jdisc-security-filters/src/main/java/com/yahoo/jdisc/http/filter/security/cors/CorsLogic.java @@ -39,7 +39,7 @@ class CorsLogic { static Map<String, String> createCorsPreflightResponseHeaders(String requestOriginHeader, Set<String> allowedOrigins) { TreeMap<String, String> headers = new TreeMap<>(); - if (allowedOrigins.contains(requestOriginHeader)) + if (requestOriginHeader != null && allowedOrigins.contains(requestOriginHeader)) headers.put(ALLOW_ORIGIN_HEADER, requestOriginHeader); ACCESS_CONTROL_HEADERS.forEach(headers::put); return headers; |